CVE-2026-71047 Oracle CVE debrief

Who should care

Defenders of Oracle Identity Manager instances, particularly those with network exposure, should assess their exposure and apply patches or mitigations as necessary. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager. The vulnerability has a high CVSS score of 8.8, indicating a high severity. Defenders should verify their instances and apply patches or mitigations as necessary to prevent potential takeover.

Why it matters

Defenders should care about CVE-2026-71047 because it allows low-privileged attackers to potentially take over Oracle Identity Manager instances, impacting confidentiality, integrity, and availability. Affected versions require verification and patching.

• Potential takeover of Oracle Identity Manager instances
• Compromise of confidentiality, integrity, and availability

Technical summary

The vulnerability in Oracle Identity Manager (component: Core) allows low-privileged attackers with network access via HTTP to compromise the product. Successful attacks can result in takeover. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability has a high CVSS score of 8.8, indicating a high severity. The CVSS Vector is (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability is easily exploitable and allows low-privileged attackers to compromise Oracle Identity Manager, potentially leading to takeover.

Defensive priority

High

Recommended defensive actions

• Review and apply Oracle's security advisory
• Assess exposure of Oracle Identity Manager instances
• Verify version and apply patches if necessary
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD analysis provide details on the vulnerability, its impacts, and affected versions. The vulnerability is caused by a weakness in the Core component of Oracle Identity Manager. The CVE record was published on 2026-09-15T20:17:42.230Z and has not been modified since then. The NVD entry is currently Analyzed. The vulnerability allows low-privileged attackers with network access via HTTP to compromise Oracle Identity Manager, potentially leading to takeover. The affected versions are 12.2.1.4.0 and 14.1.2.1.0. The CV

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.